Who is responsible
Tiny Film Club is run by Aalap Davjekar, who is the controller of the information described here and can be reached at hello@tinyfilm.club. The site is hosted by Vercel; records are stored with Supabase.
What we collect
If you join the waiting list: your name, email address, an optional WhatsApp number, whether you ticked the optional updates box, the version of this notice in force when you signed up, and the date you did.
If you book or apply for a seat: the above plus your application answers, accessibility information, participant names, consent choices and, for event-seat bookings, a payment screenshot. Records are stored in Supabase Postgres and payment screenshots are kept in a private Supabase Storage bucket.
Our forms are protected by rate limiting and, where enabled, Cloudflare Turnstile. To make that work we store one-way salted hashes of your IP address and of the email address you submit, each with a counter against it. These hashes cannot be turned back into an address, and they are not stored alongside your name or your other answers. They stop counting at the end of their window and the expired rows are cleared out during our periodic review. Turnstile is a Cloudflare service; when it is enabled, your browser contacts Cloudflare to complete the check.
Why we may use it
To run the event you signed up for. Reviewing an application, matching a payment, putting teams together and sending you practical notes are all part of the arrangement you entered into with us.
Because you asked us to. Being on the waiting list, and the separate optional box for future updates beyond the edition you asked about, both rest on your consent — which is why those boxes start unticked. You can withdraw either at any time, and withdrawing does not affect anything we did before you did so.
We use this information only for event administration and direct follow-up. We do not sell it and we do not use it for advertising. Consenting to attend is never treated as consenting to marketing.
How long we keep it
Nothing here is deleted automatically. Registration and application records are kept as a record of the editions we have run. Waiting-list entries are kept until the edition you asked about has happened and been followed up, or until you ask us to remove you — whichever comes first. The organiser reviews what is stored at least once a year and removes anything no longer needed for those purposes. If that timing does not suit you, ask and we will remove your details sooner.
Your choices
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent — email hello@tinyfilm.club and we will act on it. There is no automated decision-making: a person reads every application.
Payment
UPI payment happens in your own payment app. This website does not ask for or receive your UPI PIN, bank password, card number or bank login. We collect the screenshot you choose to upload so the organiser can manually match your payment to your booking.
Photography and team films
The event involves team filmmaking and a private group screening. Appearing in event photos or video is optional. Permission to showcase a finished film on the event website is also a separate, optional choice recorded for each participant; it is not implied by registering.
Contact
For anything at all about your information, email hello@tinyfilm.club. A person reads it.